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What is claimed is: 

1 . In a terminal of a conditional access system in which a user selects a 
service ? \the selected service being associated with a frequency, the terminal having a 
tuner and \ secure element with at least one authorized entitlement unit number stored 

5 therein, a method of determining whether the terminal is authorized to receive the 
selected serviceU;he method comprising steps of: 

receiving at least one encrypted entitlement control message 
corresponding to the\ervice; 

decrypting each of the at least one encrypted entitlement control 
10 message in the secure element, each decrypted entitlement control message revealing 
at least one first entitlement number associated with the selected service; and 

determining that the terminal is authorized to receive the selected 
service when any first entitlement number of any decrypted entitlement control 
message represents any number of i^ie at least one authorized entitlement unit number. 

15 

2. The method of claim 1 3 hirther comprising initial steps of: 
receiving over a permanently available link an entitlement unit table 

associating the selected service with at least We second entitlement number; 

tuning the tuner of the terminal to the frequency associated with the 
20 selected service when any of said at least one second entitlement number represents 
any number of said at least one authorized entitlement unit number. 

3. The method of claim 2, wherein the step of receiving over a 
permanently available data link includes receiving the entitlement unit table over an 

25 out of band data link. 



4. The method of claim 2, wherein the step o^f receiving over a 
permanently available link includes receiving the entitlement unit^able incorporated 
in a data packet that is included in a data stream associated with an initial power on 
30 frequency that is tunable by the tuner. 
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5. The method of claim 2, wherein the step of receiving over a 
permanently available link includes receiving the entitlement unit table incorporated 



\ 



in a data packet that is included in a data stream associated with each frequency that is 
tunable by the kiner. 



6. The method of claim 1, wherein the step of decrypting the at least one 
encrypted entitlementVontrol message includes recovering at least one control word 
associated with decryption of a video component of the selected service. 

10 7. The method o\claim 1, wherein the step of decrypting the at least one 

encrypted entitlement control rii^ssage includes recovering at least one control word 
associated with decryption of an ah^lio component of the selected service. 

8. The method of claim fv wherein the step of receiving at least one 
15 encrypted entitlement control message inc\ides demodulating an output of the tuner to 

recover a data component corresponding to\the selected service, the data component 
containing the encrypted entitlement control mtessage. 

9. The method of claim 1, wherein theWep of decrypting said at least one 
20 encrypted entitlement control message includes recovering at least one control word 

from said at least one decrypted entitlement control message, each control word being 
a decryption key for decrypting a corresponding servic^ component of the selected 
service. 



25 10. The method of claim 9, further comprising stepsW: 

recovering a first encrypted service component; am; 
decrypting the encrypted service component using £^ first control word 
of said at least one control word. 
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\ 1 1 . The method of claim 1 , further comprising steps of: 
\ receiving an encrypted entitlement management message addressed to 
the terminal; and 

\ decrypting the encrypted entitlement management message in the 
secure element^ the decrypted entitlement management message including an update 
of at least one authorized entitlement unit number to be stored in the secure element. 

12. The method of claim 11, wherein the step of receiving an encrypted 
entitlement management message includes receiving the encrypted entitlement 
management message overman out of band data link. 

13. The method of claim 11, wherein the step of receiving an encrypted 
entitlement management message includes receiving the encrypted entitlement 
management message incorporated \n a data packet that is included in a data stream 
associated with each frequency that istunable by the tuner. 

14. The method of claim 1, further comprising steps of: 

receiving an entitlement management message addressed to the 
terminal; and \ 

authenticating the entitlement management message in the secure 
element, the authenticated entitlement management message including an update of at 
least one authorized entitlement unit number to be stored in the secure element. 

15. The method of claim 14, wherein the stkp of receiving an entitlement 
management message includes receiving the entitlement\management message over 
an out of band data link. \ 
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M6. The method of claim 14, wherein the step of receiving an entitlement 
management message includes receiving the entitlement management message 
incorporated, in a data packet that is included in a data stream associated with each 
frequency thaois tunable by the tuner. 
5 \ 

17. Iri a\terminal of a conditional access system in which a user selects a 
service, the selected service being associated with a frequency, the terminal having a 
tuner and a secure element with at least one authorized entitlement unit number stored 
therein, a method of determining whether the terminal is authorized to receive the 
10 selected service, the method comprising steps of: 

receiving at lekst one entitlement control message corresponding to the 
service; \ 

authenticating each of the at least one entitlement control message in 
the secure element, each authenticated entitlement control message revealing at least 
15 one first entitlement number associated with the selected service; and 

determining that the rerminal is authorized to receive the selected 
service when any first entitlement number of any authenticated entitlement control 
message represents any number of the at ffeast one authorized entitlement unit number. 

20 18. The method of claim 1 7, further comprising initial steps of: 

receiving over a permanently available link an .entitlement unit table 
associating the selected service with at least one isecond entitlement number; 

tuning the tuner of the terminal to the frequency associated with the 
selected service when any of said at least one second entitlement number represents 
25 any number of said at least one authorized entitlemenVunit number. 

19. The method of claim 18, wherein the step of receiving over a 
permanently available data link includes receiving the entitlement unit table over an 
out of band data link. \ 
30 \ 



18 



• 



10 



PATENT APPLICATION 
DOCKET NO. A-6307 

\ 20. The method of claim 18, wherein the step of receiving over a 
permanently available link includes receiving the entitlement unit table , incorporated 
in a data packet that is included in a data stream associated with an initial power on 
frequency that is tunable by the tuner. 

21. The method of claim 18, wherein the step of receiving over a 
permanently available link includes receiving the entitlement unit table incorporated 
in a data packet that is^included in a data stream associated with each frequency that is 
tunable by the tuner. 

22. The method of\claim 17, wherein the step of authenticating the at least 
one entitlement control message includes recovering at least one control word 
associated with decryption of a video component of the selected service. 



15 23 . The method of claim IX wherein the step of authenticating the at least 

one entitlement control message includes recovering at least one control word 
associated with decryption of an audio component of the selected service. 

24. The method of claim 17, wherein the step of receiving at least one 
20 entitlement control message includes demodulating an output of the tuner to recover a 

data component corresponding to the selected service, the data component containing 
the entitlement control message. 

25. The method of claim 17, wherein the step of authenticating said at least 
25 one entitlement control message includes recovering at least one control word from 

said at least one entitlement control message, each control word being a decryption 
key for decrypting a corresponding service component of the selected service. 
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The method of claim 25, further comprising steps of: 
recovering a first encrypted service component; and 
decrypting the encrypted service component using a first control word 
of said at leas\ one control word. 



10 



27. Th^smethod of claim 17, further comprising steps of: 

receivhjg an encrypted entitlement management message addressed to 
the terminal; and 

decrypting \he encrypted entitlement management message in the 
secure element, the decrypteo\entitlement management message including an update 
of at least one authorized entitlement unit number to be stored in the secure element. 



15 



28. The method of claim V7, wherein the step of receiving an encrypted 
entitlement management message includes receiving the encrypted entitlement 
management message over an out of band clata link. 
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29. The method of claim 27, wherein the step of receiving an encrypted 
entitlement management message includes receiving the encrypted entitlement 
management message incorporated in a data packet that is included in a data stream 
associated with each frequency that is tunable by the raner. 
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30. The method of claim 17, further comprising, steps of: 

receiving an entitlement management message addressed to the 

terminal; and 

authenticating the entitlement management message in the secure 
element, the authenticated entitlement management message including an update of at 
least one authorized entitlement unit number to be stored in the secufce element. 
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.31. The method of claim 30, wherein the step of receiving an entitlement 
management message includes receiving the entitlement management message over 
an out of band data link. 

32. The method of claim 30, wherein the step of receiving an entitlement 
management message includes receiving the entitlement management message 
incorporated in a dam packet that is included in a data stream associated with each 
frequency that is tunabl\by the tuner. 

10 33. In a terminal W a conditional access system, the terminal including a 

tuner and a selector for selecting a service, the selected service being identified by a 
corresponding service number\and frequency, a conditional access apparatus 
comprising: 

a processor having plural control modules, a first control module 
15 controlling the processor to receive at legist one encrypted entitlement control message 
corresponding to the selected service; anc 

a secure element having Ht least one authorized entitlement unit 
number stored therein and having plural control modules, a second control module 
controlling the secure element tc decrypt each 6f the at least one encrypted entitlement 
20 control message, each decrypted entitlement comrol message revealing at least one 
first entitlement number associated with the selected service, a third control module 
controlling the secure element to determine that theNterminal is authorized to receive 
the selected service when any first entitlement number of any decrypted entitlement 
control message represents any number of the at least onp authorized entitlement unit 
25 number. 
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34. The apparatus of claim 33, wherein: 

the processor further includes a fourth control rkodule controlling the 
processor to receive over a permanently available link an entitlement unit table 
associating the selected service with at least one second entitlement \jumber; and 

21 
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the processor further includes a fifth control module controlling the 
processor to tune the tuner of the terminal to the frequency associated with the 
selected Service when any of said at least one second entitlement number represents 
any numbe^ of said at least one authorized entitlement unit number. 

35. The apparatus of claim 34, wherein the fourth control module includes 
a control moduleNx) receive the entitlement unit table over an out of band data link. 

36. The apparatus Q f claim 34, wherein the fourth control module includes 
10 a control module to receive the entitlement unit table incorporated in a data packet 

that is included in a data stream associated with an initial power on frequency that is 
tunable by the tuner. 

37. The apparatus ofVlaim 34, wherein the fourth control module includes 
15 a control module to receive the entitlement unit table incorporated in a data packet 

that is included in a data stream associated with each frequency that is tunable by the 
tuner. 



^7 



Igapparaius of claim 3jL -wherein the second control modules 



includes a control module to recover 



trol word associated with 



d ecryption of a video component of the 3clcctcd\Gorvicc. 
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39. The apparatus of claim 33, wherein the second control module includes 
a control module to recover at least one control word associated with decryption of an 
audio component of the selected service. 



30 



40. The apparatus of claim 33, wherein the first Control module includes a 
control module to demodulate an output of the tuner to recover a data component 
corresponding to the selected service, the data component containing the encrypted 
entitlement control message. 

22 
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41 . The apparatus of claim 33 , wherein the second control module includes 
a control module to recover at least one control word from said at least one decrypted 
entitlement control message, each control word being a decryption key for decrypting 
a corresponding service component of the selected service. 



10 



42. The apparatus of claim 41 , further comprising: 

a fourth control module to control the processor to recover a first 
encrypted service component; and 

a decryptor to decrypt the encrypted service component using a first 
control word of said at least one control word. 



15 
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43. The apparatus Vf claim 33, further comprising: 
a fourth controY module to control the processor to receive an 

encrypted entitlement management message addressed to the terminal; and 

a fifth control module to control the secure element to decrypt the 
encrypted entitlement management message, the decrypted entitlement management 
message including an update of at least \ne authorized entitlement unit number to be 
stored in the secure element. 

44. The apparatus of claim 43, wherein the fourth control module includes 
a control module to receive the encrypted entitlement management message over an 
out of band data link. 



25 45. The apparatus of claim 43, wherein theNfourth control module includes 

a control module to receive the encrypted entitlement management message 
incorporated in a data packet that is included in a data stream associated with each 
frequency that is tunable by the tuner. 
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46. The apparatus of claim 33, further comprising: 

a fourth control module to control the processor to receive an 
entitlement management message addressed to the terminal; and 

^X^^a fifth control module to control the secure element to authenticate the 
entitlement management message, the authenticated entitlement management message 
including an update of at least one authorized entitlement unit number to be stored in 
the secure element. 



47. The apparatus of claim 46, wherein the fourth control module includes 
10 a control module to receive th^ entitlement management message over an out of band 
data link. 
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48. The apparatus of clairn 46, wherein the fourth control module includes 
a control module to receive the entitlement management message incorporated nn a 
data packet that is included in a data stream associated with each frequency that is 
tunable by the tuner. 



49. In a terminal of a conditional access system, the terminal including a 
tuner and a selector for selecting a service, the selected service being identified by a 
20 corresponding service number and frequency, ^conditional access apparatus 
comprising: 

a processor having plural control modules, a first control module 

controlling the processor to receive at least one entitlement control message 

corresponding to the selected service; and 

25 a secure element having at least one authorised entitlement unit 

number stored therein and having plural control modules, a second control module 

controlling the secure element to authenticate each of the at least one entitlement 

control message, each entitlement control message revealing atMeast one first 

entitlement number associated with the selected service, a third control module 

30 controlling the secure element to determine that the terminal is authorize^ to receive 
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e selected service when any first entitlement number of any authenticated 

entitlement control message represents any number of the at least one authorized 

\ 

entitlement unit number. 
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50\ The apparatus of claim 49, wherein: 

the processor further includes a fourth control module controlling the 
processor to receive over a permanently available link an entitlement unit table 
associating the selected service with at least one second entitlement number; and 

the processor further includes a fifth control module controlling the 
processor to tune the tuner of the terminal to the frequency associated with the 
selected service when anyspf said at least one second entitlement number represents 
any number of said at least one authorized entitlement unit number. 
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51. The apparatus of claim 50, wherein the fourth control module includes 
a control module to receive the entitlement unit table over an out of band data link. 



20 



52. The apparatus of claim 50\wherein the fourth control module includes 
a control module to receive the entitlemenruinit table incorporated in a data packet 
that is included in a data stream associated wi\(i an initial power on frequency that is 
tunable by the tuner. 
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53. The apparatus of claim 50, wherein theviburth control module includes 
a control module to receive the entitlement unit table incorporated in a data packet 
that is included in a data stream associated with each frequency that is tunable by the 
tuner. 



, , -^^agparatPS" bi claim 4y, wherei n the sci u nd cimliol inudules 

P* / ■ — ^\ 

f includes a control module to recover at least one control^vec^d^associated with 

decryptio n iujiA^rmmpnnpnt r>P lliH ^WlHil kMi uii e 
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\ 55. The apparatus of claim 49, wherein the second control module includes 
a control module to recover at least one control word associated with decryption of an 
audio\omponent of the selected service. 



5 56.\ The apparatus of claim 49, wherein the first control module includes a 

control module to demodulate an output of the tuner to recover a data component 
corresponding tt( the selected service, the data component containing the entitlement 
control message. 

10 57. The apparatus of claim 49, wherein the second control module includes 

a control module to recover at least one control word from said at least one 
entitlement control message, each control word being a decryption key for decrypting 
a corresponding service compVnent of the selected service. 

15 58. The apparatus of claim 57, further comprising: 

a fourth control moctyle to control the processor to recover a first 
encrypted service component; and 

a decryptor to decrypt th^v encrypted service component using a first 
control word of said at least one control wor 

20 

59. The apparatus of claim 49, furtheV comprising: 

a fourth control module to conVol the processor to receive an 
encrypted entitlement management message addressed to the terminal; and 

a fifth control module to control the secure element to decrypt the 
25 encrypted entitlement management message, the decrypted entitlement management 
message including an update of at least one authorized entitlement unit number to be 
stored in the secure element. 
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60. The apparatus of claim 59, wherein the fourth control module includes 
a, control module to receive the encrypted entitlement management message over an 
outNof band data link. 

5 ^61. The apparatus of claim 59, wherein the fourth control module includes 

a control module to receive the encrypted entitlement management message 
incorporate}! in a data packet that is included in a data stream associated with each 
frequency tha\is tunable by the tuner. 

10 62. Th\ apparatus of claim 49, further comprising: 

a foiirth control module to control the processor to receive an 
entitlement management message addressed to the terminal; and 

a fifth control module to control the secure element to authenticate the 
entitlement management message, the authenticated entitlement management message 
15 including an update of at least one authorized entitlement unit number to be stored in 
the secure element. \ 

63. The apparatus of claim 62, wherein the fourth control module includes 
a control module to receive the entitlement management message over an out of band 

20 data link. \ 

64. The apparatus of claim 62, wherein the fourth control module includes 
a control module to receive the entitlement ^management message incorporated in a 
data packet that is included in a data stream associated with each frequency that is 

25 tunable by the tuner. \ 
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